检索结果-内蒙古大学图书馆

Detection of sql Injection Vulnerability in embedded sql

IEICE TRANSACTIONS ON INFORMATION AND SYSTEMS 2020年第5期E103D卷 1173-1176页

作者： Jang, Young-Su Korea Polytech Anseong South Korea

embedded sql inserts sql statements into the host programming language and executes them at program run time. sql injection is a known attack technique;however, detection techniques are not introduced in embedded sql. This paper introduces a technique based on candidate code generation that can detect sql injection vulnerability in the C/C++ host programming language.

关键词： sql injection vulnerability embedded sql candidate code generation

来源：评论

学校读者我要写书评

暂无评论

sqlInspect: A Static Analyzer to Inspect Database Usage in Java Applications 18

SQLInspect: A Static Analyzer to Inspect Database Usage in J...

引用

40th ACM/IEEE International Conference on Software Engineering (ICSE)

作者： Nagy, Csaba Cleve, Anthony Univ Namur Namur Belgium USI Lugano Switzerland

ISBN: (纸本)9781450356633

We present sqlInspect, a tool intended to assist developers who deal with sql code embedded in Java applications. It is integrated into Eclipse as a plug-in that is able to extract sql queries from Java code through static string analysis. It parses the extracted queries and performs various analyses on them. As a result, one can readily explore the source code which accesses a given part of the database, or which is responsible for the construction of a given sql query. sql-related metrics and common coding mistakes are also used to spot inefficiently or defectively performing sql statements and to identify poorly designed classes, like those that construct many queries via complex control-flow paths. sqlInspect is a novel tool that relies on recent query extraction approaches. It currently supports Java applications working with JDBC and sql code written for Mysql or Apache Impala. Check out the live demo of sqlInspect at http://***/similar to cnagy/sqlinspect.

关键词： Mysql Apache Impala embedded sql Static Analysis Metrics Bad Smells Concept Location Java JDBC Eclipse

来源：评论

学校读者我要写书评

暂无评论

Development of Tools to Manage embedded sql 11

Development of Tools to Manage Embedded SQL

引用

49th Annual Association-for-Computing-Machinery (ACM) Southeast Conference (ACMSE)

作者： Smith, Zachary Univ Alabama Box 870290 Tuscaloosa AL 35487 USA

ISBN: (纸本)9781450306867

This paper describes proposed research into the development of various software engineering tools to aid engineers in the management of embedded sql statements. It addresses the problem of recovering embedded sql from source-code files, and identifies existing tactics for doing so. It then provides mid-high level descriptions of basic tools that could be developed on top of such a parsing tool, to form an extensible tool-kit that will then be used as the basis for a GUI implementation, with focuses on ease-of-use for developers.

关键词： embedded sql source-code tools

来源：评论

学校读者我要写书评

暂无评论

Research on multi-tenancy implementation based on DB2

Research on multi-tenancy implementation based on DB2

引用

International Conference on E-Business and E-Government

作者： Gao, Zhen Yang, Jian Wang, Min Gao, Wenyang School of Software Engineering Tongji University Shanghai China Software School Fudan University Shanghai China

ISBN: (纸本)9781424486946

Multi-tenancy is a kind of technology full of business value in industry. It focuses on how to isolate and protect customer data in the same hardware and software platform. This paper makes research on multi-tenancy implementation based on DB2 for z/OS and proposes a best resolution. Furthermore, the paper also analyzes the factors which affect tenancy system interactively and suggests the proper improvement methods. © 2011 IEEE.

关键词： Business CICS Conferences DB2 for z/OS embedded sql Multi-tenancy Multimedia communication Package and Plan Pattern analysis Security Servers Software

来源：评论

学校读者我要写书评

暂无评论

Automatic generation of database instances for white-box testing

Automatic generation of database instances for white-box tes...

引用

25th Annual International Computer Software and Applications Conference (COMPSAC 2001)

作者： Zhang, B Xu, C Cheung, SC Chinese Acad Sci Inst Software Comp Sci Lab Beijing 100080 Peoples R China

ISBN: (纸本)0769513727

Testing is a critical activity for database application programs as faults if undetected could lead to unrecoverable data loss. Database application programs typically contain statements written in an imperative programming language with embedded data manipulation commands, such as sql. However relatively little study has been made in the testing of database application programs. In particular, few testing techniques explicitly consider the inclusion of database instances in the selection of test cases and the generation of test data input. In this paper we study the generation of database instances that respect the semantics of sql statements embedded in a database application program. The paper also describes a supporting tool which generates a set of constraints. These constraints collectively represent a property against which the program is tested. Database instances for program testing can be derived by solving the set of constraints using existing constraint solvers.

关键词： database applications embedded sql constraint solving automatic test data generation software testing

来源：评论

学校读者我要写书评

暂无评论

An architecture for automated software maintenance 7

An architecture for automated software maintenance

引用

7th International Workshop on Program Comprehension

作者： Sellink, A Verhoef, C Univ Amsterdam Programming Res Grp NL-1098 SJ Amsterdam Netherlands

ISBN: (纸本)0769501796

We developed an assembly line to implement certain specific changes in a stockbroking system written in COBOL with embedded sql. The changes were proposed by the maintenance team of the system. Using our architecture, it took a few hours to implement the conditional transformations from the code examples we obtained from the maintenance team. Then we could carry out the tasks completely automated. We report on the transformations, their implementation and the architecture we used. It is the intention of the company that owns the COBOL/sql to use our architecture for similar tasks. This study was carried out in order to give the company that owns the code an indication of the effort it takes, the development process of the components that carry out such tasks, and the process to change software using our architecture.

关键词： reengineering system renovation software renovation factory automated software maintenance automated redesign COBOL embedded sql

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：